This listing has expired.
The Local CISO manages the cybersecurity posture of the company in the local entity. He/She defines and cascade the Group security policy (prevention, protection, detection, resilience, remediation) in the scope and ensures its application. He/She has an advisory, assistance, information, training and alerting role, in particular with the business directors and/or the management of the company. He/She ensures proper alignment with the Group CISO. He/She ensures the implementation of operational processes and solutions to guarantee data protection and information systems security level.
Primary duties and responsibilities
- The Local Chief Security Officer oversees and leads the division that ensures company is in position to anticipate cyber threats and incidents and establish the right level of protection for customers, people and operations. He ensures the brand is trusted as #safe #secure #resilient.
- Thus, the Local Chief Security Officier is responsible for
- Defining and implementing a Security Strategic Plan at company entity in his scope in line with the Security Strategic Plan of the Group
- Determining methods to implement, enforce and advise the company entity in his scope on Security related issues
- Mitigating company risk exposure at entity in his scope ensuring that appropriate risk treatment plans are defined to comply with defined risk appetite
- Leading company Security transformation journey to put in place at entity in his scope, an organization based on key disciplines Information Security, Physical Security, Operational Resilience, Business Continuity.
- Establishing the holistic management of security
- Ensuring right and well informed security decisions are taken, escalating when required to the executive management and risk
- Ensuring the provisioning of adequate resources (financial, human, technological, etc.) to implement the company Security Strategic Plan
- Securing and monitoring the necessary budget and investments to deliver his mission
Qualifications
- -Ability to engage with Business Leaders of his perimeter as well as with CSO/COO/CISO hierarchy at company
- -Organized, self-sufficient with ability to manage teams globally and drive change
- -Ability to prioritize and execute tasks in a high-pressure environment
- -Excellent written, oral, and interpersonal communication skills (English)
- -Demonstrated experience understanding security risks, identifying gaps, and creating risk-mitigating and remediation plans, drawing up IT Security roadmap
- -Demonstrated experience understanding of technical aspects of information and IT technology and core security components more such as network, firewall, proxy, VPN, anti-malware, email protection and filtering, system security controls, vulnerability assessment, penetration testing
- -In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management etc
- -Good grasp of PCI-DSS, ISO 27001, NIST and other security norms, standards & frameworks
- -One or more of the following certifications is a plus
- -CISM or CISSP
- -Microsoft Certified Systems Engineer Security
- -GIAC Security Essentials
- -Certification Risk ISO 27005, IRAM 2 or eBios Risk Manager (ANSSI)
- -Analysis and synthesis skills
Personal attributes
- One who is passionate about driving and sustaining change in an organization through committed leadership
- Must have integrity and be dedicated to the principles of developing a strong collaborative organization with well-developed coaching skills
- A creative results-oriented leader who is particularly good at balancing multiple priorities and issues
- Must be a team player up and down the organizational structure, across countries and IT/ Security departments
- Have confidence, self-motivation, and broad business understanding to thrive in a senior autonomous role
- Ability to form open, effective, and trusting relationships with country CxO members
- Good skills in Microsoft Office Suite, especially Excel, Powerpoint
Project period
- 6 months, 3-4 workdays/week
[rdp-linkedin-login]
